# \[ANN\] Cross Site Sniper 0.3.1

**URL:** <https://www.ruby-forum.com/t/ann-cross-site-sniper-0-3-1/134532>\
**Category:** Rails\
**Created:** [April 11, 2008, 7:40pm UTC](https://www.ruby-forum.com/t/ann-cross-site-sniper-0-3-1/134532 "2008-04-11T19:40:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jonlog](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/db5fbb/32.png) [@jonlog](https://www.ruby-forum.com/u/jonlog)\
**Post date:** [April 11, 2008, 7:40pm UTC](https://www.ruby-forum.com/t/ann-cross-site-sniper-0-3-1/134532/1 "2008-04-11T19:40:40Z")

</div>

I’ve just release version 0.3.1 of Cross Site Sniper. This is a minor  
bug fix update.

Cross Site Sniper is a Ruby on Rails plugin that automatically html  
escapes all string and text fields of ActiveRecord objects. Data is  
escaped as it is retrieved from the database to protect your site from  
XSS (cross site scripting) attacks without modifying or corrupting your  
original data. Convenience methods are provided to access the unescaped  
data when necessary. Edit forms are pre-populated with unescaped data as  
well to avoid user confusion and prevent double escaping.

Documentation and install instructions can be found at  
[http://xss.rubyforge.org](http://xss.rubyforge.org)

–

[http://www.5valleys.com/](http://www.5valleys.com/)

[http://www.workingwithrails.com/person/8078](http://www.workingwithrails.com/person/8078)